When Native Browsing Redirect (artifactory.redirect.native.browser.requests.to.ui) is disabled in Artifactory, the UI displays repository contents using the Repository Tree Browser. This allows users to be prompted for a password when:
This ensures fine-grained control, making it ideal for environments where you want to grant access to specific artifacts.
Issue:
After the Artifactory upgrade, it was observed that the UI no longer shows password prompts and it just throws the error “401 Unauthorized”.
Cause:
-
Anonymous access is enabled in the environment
-
The system property artifactory.response.skip.www.authenticate.header is enabled by default from version 7.133.8 onwards
Resolution:
You can resolve the issue using one of the following options:
Option 1:
Disable Anonymous Access
-
Navigate to Administration → Security → General → Anonymous Access
-
Uncheck Enable Anonymous Access
-
Save changes
Option 2:
Disable the Artifactory system property
1. Set the system property in
$ARTIFACTORY_HOME/etc/artifactory.system.properties:
artifactory.response.skip.www.authenticate.header=false
2. Restart Artifactory for the changes to take effect
After applying either option, the UI will correctly prompt for credentials when accessing artifact URLs or listing repository contents.